What is the DPI (Deep Packet Inspection)?

Deep packet inspection (DPI) is an advanced technique used to examine and manage network traffic. It employs packet filtering to locate, identify, classify, reroute or block packets with a specific code or data payload. Conventional packet filtering can’t detect DPI, as it only looks at packet headers.

Deep Packet Inspection tools

Network administrators often use DPI as a security tool to detect and intercept viruses and other types of malicious traffic. However, they can also use it for disreputable activities, such as eavesdropping.

Deep Packet Inspection is also used to streamline the flow of network traffic. A message that is, for example, flagged as a high priority can be sent to its destination before low-priority packets or messages. DPI can also be used to improve network performance by throttling data transfer, thereby preventing peer-to-peer abuse.

DPI has sparked concern among proponents of Net Neutrality and privacy advocates, as it is possible to identify both the recipient and originator from content enclosing specific packets.

What is Obfuscation?

Obfuscating means to make something obscure. When applied to Internet traffic, obfuscating implies that you are trying to hide its real purpose, similar to putting on a disguise.

Obfuscation techniques

Obfuscation is often used to hide TOR or VPN traffic (VPN obfuscation). As some governments and ISPs block connections to these services obfuscation prevents anyone from seeing that your internet traffic is encrypted. It is also used to bypass firewalls so that restricted websites can be accessed. While these objectives may be slightly different, the same method is used to achieve both.

When special tools obfuscate Internet traffic, its original form is changed to a discrete structure that makes it look like regular Internet traffic. When users connect to a VPN, encrypted traffic is altered to look like regular, unencrypted internet traffic. However, the encryption will still be present, and your data will not be readable. Thus, it results in undetectable VPN traffic.

Obfuscation and ISP policies

Whether or not obfuscation will help with the loss of net neutrality remains to be seen, as it depends on what ISPs decide to do in the future. If they choose to block VPN and TOR traffic, then obfuscation will be useful, but if they start charging different rates for using specific services, then your options are limited.

In the latter case, all you’ll be able to do is to make it appear as if you’re using a cheaper service than what you are. One example will be if an ISP charges $1.50/Mb for normal browsing and $2.50/Mb for gaming. Internet traffic could be obfuscated to look like regular browsing instead of gaming to pay the lower rate.

What is Stealth VPN?

A Stealth VPN is a VPN protocol that can let VPN traffic appear as if it is regular web traffic, even when a network administrator activates a DPI firewall.

Firewalls are commonly used to block VPNs in countries where Internet access is restricted or censored. Some examples would include China, Iran, the United Arab Emirates, countries where VPN is illegal. Network administrators also often block VPN access for a company or school network to improve monitoring and control of network activity.

A StealthVPN service will allow you to quickly bypass these blocking mechanisms to create VPN tunnels through a firewall, including the Firewall of China.

How Stealth VPNs work

Though people commonly use the term ‘Stealth,’ it would be more accurate to describe the technology as ‘VPN Camouflage.’ A ‘Stealth’ VPN disguises VPN data packets as regular Internet traffic. The most advanced implementations obfuscate the VPN traffic into HTTPS traffic.

What is HTTPS traffic?

HTTPS connections are crucial for secure data transmissions on the Internet where credit card numbers, passwords, etc. are used. That’s why most firewalls, even if they are very restrictive, won’t block HTTPS packets, making stealth VPN technology very efficient.

SSL or TLS encryption secures the HTTPS traffic. Online banking and credit card transactions use it to increase security, as well as sites like Facebook and Google. If you see the ‘lock’ icon in your browser bar and ‘https’ before the ‘www’ in the URL, you know that your browser uses https. Routers and firewalls identify HTTPS traffic because it always uses port #443.

Stealth VPN techniques can efficiently use this characteristic of HTTPS traffic to impersonate HTTPS data and bypass firewalls undetected.

StealthVPN protocols

OpenVPN

OpenVPN has the best combination of cross-platform compatibility, security, and speed. Therefore, most Stealth VPN servers use OpenVPN encryption to reap these benefits. A local stealth proxy (called obfsproxy) modulates and obfuscates the OpenVPN traffic into regular Internet traffic.

SSTP

SSTP (Secure Socket Tunneling Protocol) is another stealth protocol that VPN enthusiasts use. But, this protocol is only available on Windows, and not all VPN providers offer it. As SSTP uses SSL encryption as its primary encryption algorithm natively, it does have a significant advantage.

Softether

The relatively new Softether protocol provides the third approach. Due to its SSL-VPN Tunneling on HTTPS, it can ‘penetrate’ highly-restricted firewalls.

StealthVPN vs. OpenVPN

The most common SteathVPN implementations are using OpenVPN and obfsproxy.

A typical data packet used with OpenVPN consists of a header that contains packet identification and routing information. The payload is the strongly encrypted part of the data packet which is forwarded to the correct web address. The header information is used to identify the source of a package, including the port # and the fact that the container contains OpenVPN data.

A stealth VPN uses obfuscation to strip the metadata that identifies the data as belonging to a VPN protocol from the packet header. The disguised packet looks like regular HTTPS encrypted web traffic by using the fact that https uses SSL/TLS Encryption and port #443.

The obfuscation is done by wrapping the OpenVPN data packet (using the obfsproxy local proxy) in a secondary layer of encryption, and assigning the data to port #443 or any other port.

When stealth technology has these two steps, the data packet can’t be distinguished from regular https data or regular Internet traffic, and it is virtually impossible to block.

When and why do you need StealthVPN?

Avoid VPN blocks, and access blocked websites

For some, a Stealth protocol is an absolute necessity. For people located in countries such as the UAE, China, or Iran, it would be difficult (or virtually impossible) to access specific websites without making use of stealth VPN technology. In some countries like Iran, using a VPN is a crime, so it is critical that you make sure your VPN is undetectable.

Avoid throttling and protect your privacy

There are also those that choose to use Stealth VPNs to protect their privacy or to avoid throttling. Although some firewalls don’t block VPN traffic, they do throttle it, slowing it down dramatically. You should know that even major ISPs like mobile providers do this.

Stealth VPN providers

Several excellent VPN providers offer StealthVPN (secure VPN) connections on their servers (check the list below).

ibVPN

ibVPN is one of my favorite VPN services as it provides a lot of exciting features (take a look at my complete ibVPN review), including a variety of servers or protocols. Regarding StealthVPN, ibVPN includes access to all three implementations (OpenVPN with obfsproxy, SSTP and Softether). The first two options are available within the Windows application, while users may install Softether on Windows, Linux, and Mac OS as a standalone client app.

IPVanish

IPVanish can obfuscate the OpenVPN traffic on two ports: 1194 and 443 (HTTPS). Choose the port and check the Obfuscate OpenVPN traffic option. It is available for the Windows application.

VyprVPN

VyprVPN has developed its proprietary stealth VPN protocol known as ‘Chameleon Protocol.’ The VyprVPN Chameleon uses a 256-bit OpenVPN encryption obfuscated and transmitted via TLS port #443. Thus, Users that live in or travel to countries such as China, Russia, India, Turkey, Iran, and Syria can access the Internet unrestricted. The Chameleon VPN is available for Windows, Mac, Android, and VPN routers.

TorGuard VPN

TorGuard bases its stealth VPN implementation on dedicated ‘Stealth’ VPN servers. Users can access these servers from the Windows, macOS, and Android apps. Also, the Stealth Proxy feature inside the TorGuard VPN apps adds a “second” layer of security that connects your standard VPN connection through an encrypted proxy layer. When enabled, the Stealth Proxy hides the “handshake,” making it impossible for the DPI firewalls to determine if VPN software is being used. A plus for TorGuard is that it offers dedicated IP address options in many locations.

Perfect Privacy

Perfect Privacy uses OpenVPN to implement Stealth VPN technology. You may obfuscate your VPN traffic by tunneling it through stunnel, ssh or obfsproxy2/obfsproxy3. Also, you can choose the connection ports #22 (SSH), #53 (DNS) and #443 (SSL). Perfect Privacy offers the StealthVPN protocol into the Windows client, or you may set up the obfuscation manually with OpenVPN on Linux and Mac.

VPN.ac

The VPN.ac ‘Stealth VPN’ secure protocol applies a technique called XOR obfuscation on the OpenVPN traffic. The OpenVPN XOR is similar to OpenVPN 256-bit regarding key strength. However, the symmetric cipher is different, AES 128-bit being faster and less CPU intensive than AES 256-bit. Running the OpenVPN XOR over port TCP #443 should bypass most firewalls/web-filtering engines. It is available on the Windows application.

Conclusion

Using stealth VPNs will camouflage your VPN and make it appear as regular web traffic. Stealth VPNs are mainly used for privacy purposes, or to bypass firewalls in countries where Internet access is restricted or censored.

Are you using HideIPVPN and you are not completely happy with it? This post lists seven good HideIPVPN alternatives for unblocking websites and browse the Internet anonymously. If you know other good VPN providers, please share them in the comments.

HideIPVPN is an excellent VPN (Virtual Private Network) provider. Here is what I appreciate the most to HideIPVPN:

• The simplicity of the VPN apps. They do what is supposed to go smoothly for the primary operating systems.
• The speed of the VPN connection and unlimited traffic.
• The Smart DNS option that easily accesses blocked websites.
• The fact that it offers access to SoftEther VPN protocol.

Why would you look for HideIPVPN alternatives?

HideIPVPN (Hide IP VPN) offers access to servers located United States, United Kingdom, Canada, Netherlands, Germany, Poland, and France. If you are looking for more locations or more sophisticated options like DoubleVPN, TorOverVPN or Stealth VPN you need to look somewhere else.

How to look for alternatives?

Take a look at the list below or search Google for “alternatives to HideIPVPN.” You will find plenty of HideIPVPN alternatives. Do not jump to the first one that looks good! Take your time and look for user reviews and reviews written by bloggers. These will help you make an informed choice.

7 HideIPVPN alternatives – Top VPN services providers

I have selected seven excellent VPN alternatives that easily hide your IP address and may offer what you need: an extended number of servers, excellent support, simultaneous connections on multiple devices, and good connection speed.

Additional tips

HideIPVPN provides a smooth VPN service for a reasonable price. When switching to an alternative provider, it may happen that you are not happy with the one you picked.

My advice is to create a subscription for the shortest period available (one or 3 months). Thus, you will be able to thoroughly test the alternative service before committing to a more extended billing agreement.

Please share your experience with HideIPVPN and its alternatives in the comments below.

SoftEther VPN (from “Software Ethernet”) is a relatively new VPN protocol, a cross-platform multi-protocol VPN,  considered the excellent OpenVPN alternative. This post explains what SoftEther is and how you can benefit from its advantages.

What is SoftEther VPN?

The SoftEther project was developed as part of a thesis research at the University of Tsukuba, Japan. It consists of two parts: a new VPN (Virtual Private Network) protocol and a VPN server capable of establishing VPN connections using multiple VPN protocols (a.k.a, multiprotocol VPN), including L2TP, SSTP VPN, and OpenVPN.

The SoftEther VPN protocol is an alternative to OpenVPN and other VPN protocols. It is free, open-source, and runs on Windows, Linux, Mac, FreeBSD, and Solaris. Take a look below to see its main benefits.

The SoftEther VPN server can communicate with various devices using not only the SoftEther protocol but also L2TP/IPSec or OpenVPN. Moreover, Microsoft’s SSTP is accepted, even if the VPN server is installed on Linux. By the way, the SoftEther VPN server can be installed on Windows, Linux, FreeBSD, Solaris, and Mac OS X. You may read more details regarding the SoftEther server architecture on the SoftEther official web page. Also, you may download SoftEther VPN applications.

SoftEther VPN protocol benefits

Here are some of the most important benefits the SoftEther protocol brings to its users:

• It is free and open-source. Thus, any potential security flaws can be easily detected and fixed by the community.
• It is fast!
• Due to its SSL-VPN Tunneling on HTTPS, it can “penetrate” highly-restricted firewalls. It is considered to be a Stealth VPN protocol.
• It uses high-level encryption: AES 256-bit and RSA 4096-bit.
• Supports PFS (Perfect Forward Secrecy).

SoftEther VPN vs. OpenVPN

SoftEther is often compared to OpenVPN, a standard when it comes to VPN protocols. Let’s take a look at several differences between these two protocols and VPN servers:

• According to some tests, SoftEther protocol is the fastest. Also, the SoftEther server is faster on all protocols including OpenVPN.
• The fact that the SoftEther VPN server can support multiple protocols is also a big plus compared to OpenVPN.
• All operating system which supports OpenVPN (e.g., Linux, Mac OS X, Linux, UNIX, iPhone, and Android) can connect to SoftEther VPN server.
• SoftEther VPN Server has a more natural configuration than the OpenVPN server.

To sum up the comparison, SoftEther is better than OpenVPN in more than one aspect. The future will tell if SoftEther will be adopted on a large scale and replace OpenVPN.

SoftEther vs. VPN Gate

The term “SoftEther” is often associated with “VPN Gate.” However, even if the same team develops them, there are significant differences. VPN Gate is an optional extension module that can be activated on a SoftEther VPN Server or Client.

According to the project page: If you activate the VPN Gate extension on SoftEther Server, then a Virtual Hub “VPNGATE” will be created on your VPN Server. The “VPNGATE” hub contains the “VPN” user with anonymous-attributes. That means that anyone who knows your VPN Server’s IP address can connect to the “VPNGATE” hub on your VPN Server.

Also, the module registers your server on the VPNGate directory. Thus, your SoftEther server could be used by anonymous users from all over the World. The “VPN Gate” module is disabled by default for security reasons.

SoftEther VPN providers

Even if the SoftEther protocol is very fast, it has not (yet) been adopted by most of the VPN providers. However, I was able to find a couple of VPN providers that accept connections from SoftEther VPN clients: ibVPN (now migrated to StrongVPN) and HideIPVPN.

How to use SoftEther apps – Install SoftEther

Setting up the SoftEther VPN connections is an easy task. First, you need to install a SoftEther client app. Once installed, create a new VPN connection and fill in the necessary info. Take a look below at the example provided by ibVPN.

Conclusion

To sum up, SoftEther looks very promising. The protocol is high-speed, secure and stable. The server-side can communicate on different protocols and runs on various server configurations (including Linux and Windows). Keep an eye on SoftEther! It may soon become a VPN standard!

What do you think of it? Let us know in the comments below!